Options -Indexes
<FilesMatch "^(config\.local\.php|\.env|composer\.(json|lock))$">
  Require all denied
</FilesMatch>
